![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft
File: siLLxLlfE3uN2qDj8k8FuTPMepo.mft (raw, json)
Hash identifier: Q9K3+/fWGL+UtVWv9SoRQmuyU2ZYsiHQ1+fiqgfdEqw=
Subject key identifier: 71:AF:90:24:5A:72:5A:1D:6C:8A:DD:39:79:41:89:5B:9A:C8:66:DF
Authority key identifier: B2:22:CB:C4:B9:5F:13:7B:8D:DA:A0:E3:F2:4F:05:B9:33:CC:7A:9A
Certificate issuer: /CN=b222cbc4b95f137b8ddaa0e3f24f05b933cc7a9a
Certificate serial: 019510C7D7AF7B82BD7011F20BEBAD4B923C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siLLxLlfE3uN2qDj8k8FuTPMepo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft
Manifest number: 1453
Signing time: Sun 16 Feb 2025 22:01:26 +0000
Manifest this update: Sun 16 Feb 2025 22:01:26 +0000
Manifest next update: Mon 17 Feb 2025 22:01:26 +0000
Files and hashes: 1: siLLxLlfE3uN2qDj8k8FuTPMepo.crl (hash: IoCFp4zzzj/FIV0AHjMyKEum9BEJpew3yaaxv1FXd8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft
rsync://rpki.ripe.net/repository/DEFAULT/siLLxLlfE3uN2qDj8k8FuTPMepo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:d7:af:7b:82:bd:70:11:f2:0b:eb:ad:4b:92:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b222cbc4b95f137b8ddaa0e3f24f05b933cc7a9a
Validity
Not Before: Feb 16 22:01:26 2025 GMT
Not After : Feb 17 22:01:26 2025 GMT
Subject: CN=71af90245a725a1d6c8add397941895b9ac866df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:ff:3b:59:1d:77:34:f4:ea:72:f2:90:c0:
7d:0c:f9:29:64:7e:4b:fe:c3:84:91:24:36:49:70:
a6:ed:44:ba:c1:40:88:c0:f0:21:04:91:03:35:71:
f4:d4:72:59:d1:d4:d6:df:5b:f9:ad:1e:33:8b:bb:
b6:d1:5b:e8:ad:d7:a7:8e:8a:a2:44:a1:bc:35:c4:
17:ae:59:3f:47:47:1c:cc:21:51:2c:7a:76:c8:5c:
96:dc:6c:ec:ed:15:b9:c8:13:2b:c0:72:f9:b0:e0:
e2:f6:dc:da:4f:fb:c8:21:8f:f5:eb:77:c3:85:6f:
51:2d:5a:78:1b:ef:0d:35:c4:c3:83:ef:ec:a4:24:
2d:d7:63:b1:40:a4:80:80:90:b3:04:cc:fc:6f:29:
1c:46:53:42:9a:b2:bc:af:01:69:3d:3a:4f:f9:5e:
1d:27:ea:77:99:e7:87:15:18:82:1f:44:47:80:eb:
d8:1c:41:3f:df:b2:71:e2:03:c7:63:1f:b4:bd:73:
37:ec:20:ae:3e:60:b4:7c:9f:9f:8c:73:8d:95:d8:
1f:31:e6:42:d6:7c:6f:c9:f5:38:a4:2d:6a:a0:22:
f9:d2:90:a9:14:59:98:fb:d6:b6:7a:b0:d3:59:2c:
70:79:8b:2b:b1:be:1a:d0:d6:a0:cf:81:2f:27:8c:
02:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AF:90:24:5A:72:5A:1D:6C:8A:DD:39:79:41:89:5B:9A:C8:66:DF
X509v3 Authority Key Identifier:
keyid:B2:22:CB:C4:B9:5F:13:7B:8D:DA:A0:E3:F2:4F:05:B9:33:CC:7A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siLLxLlfE3uN2qDj8k8FuTPMepo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ba:3c:bc:76:8f:5c:27:9d:4d:1a:37:42:db:1c:19:10:76:
c7:07:a9:16:11:6f:9a:7a:1e:0e:73:03:78:45:bf:b9:27:74:
d1:d0:c9:1f:c6:0e:95:5c:0c:81:eb:cb:d6:b8:57:00:af:59:
32:a9:d1:d2:be:57:40:06:ef:db:4e:c0:85:ee:4d:0e:cd:55:
3b:bb:b4:8e:40:97:c7:3c:4a:13:c5:82:66:c9:49:03:f8:1c:
1f:cc:0f:d1:96:63:2b:5a:74:41:1f:ed:31:66:fa:fc:88:32:
fa:e7:72:9f:fe:0c:6b:56:0a:20:cc:e1:5c:7e:ab:fe:44:a7:
f3:1c:78:10:c2:a6:5f:4e:58:54:17:f7:cf:c6:f3:58:2f:13:
1f:97:5f:78:2f:65:b4:c1:bf:3d:63:d6:39:75:2f:f7:0c:b7:
69:50:a8:40:d2:c1:c3:ed:4e:c2:ad:e6:79:fd:75:46:69:c0:
9e:49:1e:21:03:e8:80:3d:2b:55:ae:61:db:47:27:f4:2e:a8:
54:b0:d7:08:19:fb:cb:a9:d4:60:d9:01:50:e1:ea:d7:7b:e0:
f2:4b:6a:b0:fd:4f:1c:bf:20:98:28:4e:1c:60:c1:28:d5:9a:
1d:d1:ee:25:02:01:b8:d5:58:f6:f6:7a:04:c0:df:d4:49:de:
ab:fa:54:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx9eve4K9cBHyC+utS5I8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMjJjYmM0Yjk1ZjEzN2I4ZGRhYTBlM2YyNGYwNWI5MzNj
YzdhOWEwHhcNMjUwMjE2MjIwMTI2WhcNMjUwMjE3MjIwMTI2WjAzMTEwLwYDVQQD
Eyg3MWFmOTAyNDVhNzI1YTFkNmM4YWRkMzk3OTQxODk1YjlhYzg2NmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo07/O1kddzT06nLykMB9DPkpZH5L
/sOEkSQ2SXCm7US6wUCIwPAhBJEDNXH01HJZ0dTW31v5rR4zi7u20Vvordenjoqi
RKG8NcQXrlk/R0cczCFRLHp2yFyW3Gzs7RW5yBMrwHL5sODi9tzaT/vIIY/163fD
hW9RLVp4G+8NNcTDg+/spCQt12OxQKSAgJCzBMz8bykcRlNCmrK8rwFpPTpP+V4d
J+p3meeHFRiCH0RHgOvYHEE/37Jx4gPHYx+0vXM37CCuPmC0fJ+fjHONldgfMeZC
1nxvyfU4pC1qoCL50pCpFFmY+9a2erDTWSxweYsrsb4a0Nagz4EvJ4wCpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGvkCRaclodbIrdOXlBiVuayGbfMB8GA1UdIwQY
MBaAFLIiy8S5XxN7jdqg4/JPBbkzzHqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2lMTHhMbGZFM3VOMnFEajhrOEZ1VFBNZXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84MjY5YzQtOWMwMi00Y2MyLTlhOTUt
Y2YwZTc4NmExZmZkLzEvc2lMTHhMbGZFM3VOMnFEajhrOEZ1VFBNZXBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84MjY5YzQtOWMwMi00Y2MyLTlhOTUtY2YwZTc4NmExZmZk
LzEvc2lMTHhMbGZFM3VOMnFEajhrOEZ1VFBNZXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLo8vHaP
XCedTRo3QtscGRB2xwepFhFvmnoeDnMDeEW/uSd00dDJH8YOlVwMgevL1rhXAK9Z
MqnR0r5XQAbv207Ahe5NDs1VO7u0jkCXxzxKE8WCZslJA/gcH8wP0ZZjK1p0QR/t
MWb6/Igy+udyn/4Ma1YKIMzhXH6r/kSn8xx4EMKmX05YVBf3z8bzWC8TH5dfeC9l
tMG/PWPWOXUv9wy3aVCoQNLBw+1Owq3mef11RmnAnkkeIQPogD0rVa5h20cn9C6o
VLDXCBn7y6nUYNkBUOHq13vg8ktqsP1PHL8gmChOHGDBKNWaHdHuJQIBuNVY9vZ6
BMDf1Eneq/pU/Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:37 2025 by rpki-client